com.github.waffle.demo:waffle-spring-filter (3.0.0), com.github.waffle.demo:waffle-spring-form (3.0.0) +31 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.19.release)

org.springframework.security:spring-security-core MAVEN version 4.2.19.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.waffle.demo:waffle-spring-filter 3.0.0 -...

cn.sparrowmini:sparrow-org-service (0.0.1), cn.sparrowmini:sparrow-pem-service (0.0.1) +618 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (>=5.8.0, <=5.8.10)

org.springframework.security:spring-security-core MAVEN version =5.8.0, =5.2.0, =5.11.0, =5.11.0, =1.48.0, =1.48.0, =1.48.0, =2.4.0, =2.4.0, =2.4.0, =3.7.0, =3.7.0, =3.7.0, =3.7.0, =4.1.4 and more Source cves: CVE-2024-22257 Source advisory: OSV:GHSA-F3JH-QVM4-MG39...

be.jidoka:jdk-keycloak-admin (>=2.0.0, <=2.2.0), be.personify.iam:personify-frontend (>=1.5.1.release, <=1.5.2.release) +1829 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (>=6.0.0, <=6.1.7)

org.springframework.security:spring-security-core MAVEN version =6.0.0, =2.0.0, =1.5.1.release, =1.1.0, =1.1.0, =1.1.4.2, =1.1.5 - cc.vihackerframework:vihacker-auth-starter 1.0.8.r - cc.vihackerframework:vihacker-common-starter 1.0.8.r - cc.vihackerframework:vihacker-log-starter 1.0.8.r -...

com.github.dblock.waffle:waffle-spring-security2 (>=1.7, <=1.7.5), com.googlecode.cedar-common:cedar-common-gae (>=2.1.3, <=5.8.4) +12 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (2.0.8.release)

org.springframework.security:spring-security-core MAVEN version 2.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.dblock.waffle:waffle-spring-security2 =1.7...

ai.foremast.metrics:foremast-spring-boot-15x-starter (>=0.1.10, <=0.1.11), ch.sharedvd.tipi:tipi-engine (>=1.1.10, <=1.1.11) +162 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.7.release)

org.springframework.security:spring-security-core MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter...

com.github.fosin:cdp-oauth2 (1.0.0.release), com.sap.cloud.lm.sl.cf:com.sap.cloud.lm.sl.cf.client (>=1.65.4, <=1.67.1) +140 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.8.release)

org.springframework.security:spring-security-core MAVEN version 4.2.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.fosin:cdp-oauth2 1.0.0.release -...

ai.foremast.metrics:foremast-spring-boot-15x-starter (0.1.8), at.researchstudio.sat:won-cryptography (>=0.4, <=0.6) +125 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.9.release)

org.springframework.security:spring-security-core MAVEN version 4.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - ai.foremast.metrics:foremast-spring-boot-15x-starter...

com.foreach.imageserver:imageserver-admin (5.0.0.release), com.foreach.imageserver:imageserver-test-embedded (5.0.0.release) +106 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.10.release)

org.springframework.security:spring-security-core MAVEN version 4.2.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.foreach.imageserver:imageserver-admin...

cn.springcloud.gray:spring-cloud-gray-server (>=a.1.1.1, <=a.2.0.0), cn.springcloud.gray:spring-cloud-gray-server-cluster-http-synchro-plugin (>=a.2.0.0.rc1, <=a.2.0.0) +202 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.13.release)

org.springframework.security:spring-security-core MAVEN version 4.2.13.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cn.springcloud.gray:spring-cloud-gray-server =a.1.1....

au.org.consumerdatastandards:client-cli (>=1.1.1, <=1.12.0), com.atlassian.asap:asap-server-spring-security (>=2.21.8, <=2.21.9) +119 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.11.release)

org.springframework.security:spring-security-core MAVEN version 4.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - au.org.consumerdatastandards:client-cli =1.1.1,...

cc.kebei:onion-expands-office (>=3.0.3, <=3.0.6), cc.kebei:onion-expands-script (>=3.0.3, <=3.0.6) +121 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (4.2.12.release)

org.springframework.security:spring-security-core MAVEN version 4.2.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - cc.kebei:onion-expands-office =3.0.3, =3.0.3, =3.0.3...

br.net.woodstock.rockframework:rockframework-domain (>=1.2.1, <=1.2.2), com.keyholesoftware:khs-sherpa-spring (>=1.2.0, <=1.2.1) +15 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.0.0.release)

org.springframework.security:spring-security-core MAVEN version 3.0.0.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - br.net.woodstock.rockframework:rockframework-domain...

org.jasig.cas:cas-server-webapp (>=3.4-rc1, <=3.4.3), org.springframework.security:spring-security-acl (3.0.1.release) +13 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.0.1.release)

org.springframework.security:spring-security-core MAVEN version 3.0.1.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.jasig.cas:cas-server-webapp =3.4-rc1, =3.4.3 -...

com.payneteasy.superfly:superfly-web (>=1.2-1, <=1.4-3), org.codehaus.enunciate:enunciate-spring3-security-rt (>=1.20, <=1.22) +15 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.0.2.release)

org.springframework.security:spring-security-core MAVEN version 3.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.payneteasy.superfly:superfly-web =1.2-1, =1.20,...

com.github.lrkwz:urlmanaged-locale (0.0.1), com.isotrol.impe3.extensions:impe3-pms-ldap (>=3.0.0, <=3.1.1) +69 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.0.7.release)

org.springframework.security:spring-security-core MAVEN version 3.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.github.lrkwz:urlmanaged-locale 0.0.1 -...

app.valuationcontrol:library (>=0.5.2, <=0.5.6), app.valuationcontrol:webservice (>=0.5.0, <=0.5.1) +1446 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (>=6.2.0, <=6.2.2)

org.springframework.security:spring-security-core MAVEN version =6.2.0, =0.5.2, =0.5.0, =7.0.0, =1.0.0, =v1.0.26, =v1.0.26, =v1.0.26, =v1.0.26, =v1.0.26, =3.2.0.0, =3.2.0.0, =3.2.0.0, =3.2.0.0, =3.2.2.2 and more Source cves: CVE-2024-22257 Source advisory: OSV:GHSA-F3JH-QVM4-MG39...

com.force.sdk:force-springsecurity (>=22.0.2-beta, <=22.0.9-beta), com.logitags:cibet (>=1.1, <=1.9) +24 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.0.3.release)

org.springframework.security:spring-security-core MAVEN version 3.0.3.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - com.force.sdk:force-springsecurity =22.0.2-beta, =1.1...

fr.xebia.springframework:xebia-spring-security-extras (>=1.1.4, <=1.1.6), org.appfuse.archetypes:appfuse-archetypes (2.1.0-m2) +53 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.0.4.release)

org.springframework.security:spring-security-core MAVEN version 3.0.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - fr.xebia.springframework:xebia-spring-security-extras...

com.github.cwilper.fcrepo-cloudsync:fcrepo-cloudsync-service (>=1.0.0-beta-1, <=1.0.0), com.github.lltyk:tapestry-spring-security (>=3.0.2, <=3.0.3) +199 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.0.5.release)

org.springframework.security:spring-security-core MAVEN version 3.0.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: -...

org.ff4j:ff4j-security-spring (>=1.0.0, <=1.1.0), org.springframework.security:spring-security-acl (3.0.8.release) +7 more potentially affected by CVE-2024-22257 via org.springframework.security:spring-security-core (3.0.8.release)

org.springframework.security:spring-security-core MAVEN version 3.0.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.ff4j:ff4j-security-spring =1.0.0, =1.1.0 -...